9.5/_functional_2_session_2_backend_2_database_session_backend_test_8php_source.html

<?php

declare(strict_types = 1);

namespace ‪TYPO3\CMS\Core\Tests\Functional\Session\Backend;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use ‪TYPO3\CMS\Core\Session\Backend\DatabaseSessionBackend;

use ‪TYPO3\CMS\Core\Session\Backend\Exception\SessionNotCreatedException;

use ‪TYPO3\CMS\Core\Session\Backend\Exception\SessionNotFoundException;

use TYPO3\TestingFramework\Core\Functional\FunctionalTestCase;


class ‪DatabaseSessionBackendTest extends FunctionalTestCase

{

    protected ‪$subject;


    protected ‪$testSessionRecord = [

        // DatabaseSessionBackend::hash('randomSessionId') with encryption key 12345

        'ses_id' => '76898588caa1baee7984f4dc8adfed3b',

        'ses_userid' => 1,

        // serialize(['foo' => 'bar', 'boo' => 'far'])

        'ses_data' => 'a:2:{s:3:"foo";s:3:"bar";s:3:"boo";s:3:"far";}',

    ];


    protected function ‪setUp()

    {

        parent::setUp();

        ‪$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'] = '12345';


        $this->subject = new ‪DatabaseSessionBackend();

        $this->subject->initialize('default', [

            'table' => 'fe_sessions',

            'has_anonymous' => true,

        ]);

    }


    public function ‪canValidateSessionBackend()

    {

        $this->subject->validateConfiguration();

    }


    public function ‪sessionDataIsStoredProperly()

    {

        $record = $this->subject->set('randomSessionId', $this->testSessionRecord);


        $expected = array_merge($this->testSessionRecord, ['ses_tstamp' => ‪$GLOBALS['EXEC_TIME']]);


        $this->assertEquals($record, $expected);

        $this->assertArraySubset($expected, $this->subject->get('randomSessionId'));

    }


    public function ‪anonymousSessionDataIsStoredProperly()

    {

        $record = $this->subject->set('randomSessionId', array_merge($this->testSessionRecord, ['ses_anonymous' => 1]));


        $expected = array_merge($this->testSessionRecord, ['ses_anonymous' => 1, 'ses_tstamp' => ‪$GLOBALS['EXEC_TIME']]);


        $this->assertEquals($record, $expected);

        $this->assertArraySubset($expected, $this->subject->get('randomSessionId'));

    }


    public function ‪throwExceptionOnNonExistingSessionId()

    {

        $this->expectException(SessionNotFoundException::class);

        $this->expectExceptionCode(1481885483);

        $this->subject->get('IDoNotExist');

    }


    public function ‪mergeSessionDataWithNewData()

    {

        $this->subject->set('randomSessionId', $this->testSessionRecord);


        $updateData = [

            'ses_data' => serialize(['foo' => 'baz', 'idontwantto' => 'set the world on fire']),

            'ses_tstamp' => ‪$GLOBALS['EXEC_TIME']

        ];

        $expectedMergedData = array_merge($this->testSessionRecord, $updateData);

        $this->subject->update('randomSessionId', $updateData);

        $fetchedRecord = $this->subject->get('randomSessionId');

        $this->assertArraySubset($expectedMergedData, $fetchedRecord);

    }


    public function ‪existingSessionMustNotBeOverridden()

    {

        $this->expectException(SessionNotCreatedException::class);

        $this->expectExceptionCode(1481895005);


        $this->subject->set('randomSessionId', $this->testSessionRecord);


        $newData = array_merge($this->testSessionRecord, ['ses_data' => serialize(['foo' => 'baz', 'idontwantto' => 'set the world on fire'])]);

        $this->subject->set('randomSessionId', $newData);

    }


    public function ‪cannotChangeSessionId()

    {

        $this->subject->set('randomSessionId', $this->testSessionRecord);


        $newSessionId = 'newRandomSessionId';

        $newData = ‪$this->testSessionRecord;

        $newData['ses_id'] = $newSessionId;


        // old session id has to exist, no exception must be thrown at this point

        $this->subject->get('randomSessionId');


        // Change session id

        $this->subject->update('randomSessionId', $newData);


        // no session with key newRandomSessionId should exist

        $this->expectException(SessionNotFoundException::class);

        $this->expectExceptionCode(1481885483);

        $this->subject->get('newRandomSessionId');

    }


    public function ‪sessionGetsDestroyed()

    {

        $this->subject->set('randomSessionId', $this->testSessionRecord);


        // Remove session

        $this->assertTrue($this->subject->remove('randomSessionId'));


        // Check if session was really removed

        $this->expectException(SessionNotFoundException::class);

        $this->expectExceptionCode(1481885483);

        $this->subject->get('randomSessionId');

    }


    public function ‪canLoadAllSessions()

    {

        $this->subject->set('randomSessionId', $this->testSessionRecord);

        $this->subject->set('randomSessionId2', $this->testSessionRecord);


        // Check if session was really removed

        $this->assertEquals(2, count($this->subject->getAll()));

    }


    public function ‪canCollectGarbage()

    {

        ‪$GLOBALS['EXEC_TIME'] = 150;

        $authenticatedSession = array_merge($this->testSessionRecord, ['ses_id' => 'authenticatedSession']);

        $anonymousSession = array_merge($this->testSessionRecord, ['ses_id' => 'anonymousSession', 'ses_anonymous' => 1]);


        $this->subject->set('authenticatedSession', $authenticatedSession);

        $this->subject->set('anonymousSession', $anonymousSession);


        // Assert that we set authenticated session correctly

        self::assertSame(

            $authenticatedSession['ses_data'],

            $this->subject->get('authenticatedSession')['ses_data']

        );


        // assert that we set anonymous session correctly

        self::assertSame(

            $anonymousSession['ses_data'],

            $this->subject->get('anonymousSession')['ses_data']

        );


        // Run the garbage collection

        ‪$GLOBALS['EXEC_TIME'] = 200;

        // 150 + 10 < 200 but 150 + 60 >= 200

        $this->subject->collectGarbage(60, 10);


        // Authenticated session should still be there

        self::assertSame(

            $authenticatedSession['ses_data'],

            $this->subject->get('authenticatedSession')['ses_data']

        );


        // Non-authenticated session should be removed

        $this->expectException(SessionNotFoundException::class);

        $this->expectExceptionCode(1481885483);

        $this->subject->get('anonymousSession');

    }


    public function ‪canPartiallyUpdateAfterGet()

    {

        $updatedRecord = array_merge(

            $this->testSessionRecord,

            ['ses_tstamp' => ‪$GLOBALS['EXEC_TIME']]

        );

        $sessionId = 'randomSessionId';

        $this->subject->set($sessionId, $this->testSessionRecord);

        $this->subject->update($sessionId, []);

        $this->assertArraySubset($updatedRecord, $this->subject->get($sessionId));

    }

}